Privacy Policy

1. Who we are

SiyaData is operated by SIYA EXPRESS LTD, a registered Nigerian company. In this policy, “SiyaData”, “we”, “us” and “our” mean SIYA EXPRESS LTD, which decides how and why your personal information is used when you use the SiyaData website, app and services.

This policy explains what information we process, why, who we share it with, how long we keep it and the choices you have.

2. Information we process

Depending on how you use SiyaData, we may process:

• Identity and contact details: your name, phone number and email address.
• Authentication and security data: your password (stored only in a protected, non-readable form), one-time verification codes, your transaction PIN (also stored only in a protected form), session and sign-in records, and records of failed attempts and security alerts.
• Wallet and transaction records: wallet balances, funding received, purchases, the recipient phone number for a purchase, amounts, references, dates and the status of each transaction.
• Identity verification details: where verification is required, your National Identification Number (NIN) or Bank Verification Number (BVN), together with your name, date of birth, phone number and email as needed to verify them.
• Device and security information: information about the device and browser you use, IP address, and records of trusted devices, used to keep your account secure.
• Service usage information: which services you use, plans you choose and how you interact with SiyaData, so we can run and improve the service.
• Messages you send us: the content of emails and support requests.

3. Why we use your information

We use personal information to:

• create and manage your account, and confirm that your phone number belongs to you;
• keep your account and wallet secure, including verifying sign-ins and transaction PINs and detecting misuse or fraud;
• receive and record wallet funding, and process the digital-service purchases you ask for;
• verify your identity where this is required, for example before a dedicated funding account can be issued to you;
• show you your transaction history and receipts, and answer your questions and complaints;
• keep accurate financial records, reconcile transactions and resolve pending or disputed transactions;
• meet our legal and regulatory obligations, and establish or defend legal claims;
• maintain and improve SiyaData.

We rely on the legal bases available under applicable Nigerian data protection law, including the Nigeria Data Protection Act 2023. These include performing our contract with you, complying with legal obligations, our legitimate interests in running a safe and reliable service, and your consent where it is required.

4. Account security and identity verification

Purchases from your wallet are confirmed with your transaction PIN, and new devices need extra confirmation before they can sign in. Records of sign-ins, failed attempts and security changes help us protect your account and investigate problems.

Where identity verification is required, we send your NIN or BVN and related details to an identity verification provider to confirm that they match. Your NIN or BVN is encrypted before we store it, and we only ever display a masked version (for example, the last four digits).

5. Service providers and sharing

We do not sell your personal information. We share it only where needed to provide SiyaData, with organisations that process it on our behalf or as part of the services you request, such as:

• payment and banking partners that issue funding accounts and process wallet funding;
• digital-service providers that deliver data, airtime, TV and electricity purchases (for example, the recipient number and the plan you chose);
• identity verification providers;
• SMS and messaging providers that deliver verification codes;
• hosting, infrastructure and security providers that run our systems.

These providers may only use your information to provide their services to us or to you, and we share no more than they need. We may also disclose information where required by law, regulation or a lawful request from a competent authority, or to protect our customers, our users or SiyaData against fraud or harm.

Some providers may process information outside Nigeria. Where this happens, we take steps to ensure your information remains protected as required by applicable law.

6. How long we keep information

We keep personal information only for as long as we need it for the purposes in this policy, including to meet legal, accounting and reporting requirements.

• Account details are kept while your account is open, and afterwards for as long as needed to meet our obligations and resolve any open matters.
• Wallet and transaction records are financial records. They are kept as a permanent, unaltered history so that every balance can be checked and every transaction traced. For this reason they cannot be edited or deleted on request.
• Security and audit records are kept for as long as needed to protect accounts and investigate incidents.

7. Your rights

Subject to applicable law, you may ask us to:

• tell you whether we hold your personal information and give you a copy of it;
• correct information that is inaccurate or incomplete;
• delete information we no longer have a valid reason to keep;
• restrict or object to certain uses of your information;
• withdraw consent where we rely on it (this does not affect earlier processing);
• provide your information in a commonly used electronic format.

Some requests may be limited where we must keep information by law, such as financial records. We will verify your identity before acting on a request. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission.

8. How we protect information

We use technical and organisational measures appropriate to the information we hold, including:

• encrypted connections between your device and SiyaData;
• passwords and transaction PINs stored only in protected, non-readable forms;
• encryption of sensitive identity information before it is stored;
• limits on repeated sign-in and PIN attempts, and extra checks for new devices;
• access to customer information restricted to systems and staff that need it.

No system can be guaranteed to be completely secure. Please keep your password, transaction PIN and one-time codes private. SiyaData will never ask you for them.

9. Cookies

This public website does not use advertising or tracking cookies. The SiyaData customer app uses essential cookies to keep you signed in securely; they are needed for the app to work and are not used for advertising.

10. Children

SiyaData accounts are for adults. We do not knowingly create accounts for, or collect personal information from, children.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change is significant, we will take reasonable steps to let you know before it applies.

12. Contact us

For questions about this policy or your personal information, or to make a request:

Email developer@siyaexpressltd.com or write to SIYA EXPRESS LTD, Shop No. 49, Borno Express Terminus, MMC, Maiduguri, Borno State, Nigeria.

See also our Terms of Service.